Title :
A Multi-core Supported Intrusion Detection System
Author :
Tian Daxin ; Xiang Yang
Author_Institution :
Sch. of Comput. Sci. & Technol., Tianjin Univ., Tianjin
Abstract :
Integrated multi-core processors with on-chip application acceleration have established themselves as the most efficient method of powering next-generation networking platforms. New research has been conducted for addressing the issues of multi-core supported network and system security. This paper put forward an asymmetrical multiprocessing architecture multi-core supported anomaly intrusion detection system. The key idea is to use an independent core to run the intrusion detection system to monitor the host system. The detection method is based on the Hebb rule and uses libpcap to grab the network transmission packages. In the experiments, we use VMware which is configured to run the Ubuntu to simulate the IDS core. The results show that when the intrusion threshold is 0.3-0.5 the system performs best.
Keywords :
microprocessor chips; multiprocessing systems; security of data; Hebb rule; VMware; asymmetrical multiprocessing architecture; integrated multicore processor; libpcap; multicore supported intrusion detection system; network transmission package; on-chip application acceleration; system security; Acceleration; Authentication; Computer architecture; Cryptography; Data security; Information security; Intrusion detection; Monitoring; Multicore processing; Protection; Intrusion Detection System; Multi-core; Network Security;
Conference_Titel :
Network and Parallel Computing, 2008. NPC 2008. IFIP International Conference on
Conference_Location :
Shanghai
Print_ISBN :
978-0-7695-3354-4
DOI :
10.1109/NPC.2008.19
